Updated samples files as part of: EDSF-535 Add prefix to tarball/agen…

…t s3 bucket
imperva · Feb 14, 2024 · e721453 · e721453
1 parent b0079de
commit e721453
Show file tree

Hide file tree

Showing 3 changed files with 5 additions and 11 deletions.
diff --git a/dsf_instances_permissions_samples/AgentlessGatewayInstancePermissions.txt b/dsf_instances_permissions_samples/AgentlessGatewayInstancePermissions.txt
@@ -34,12 +34,10 @@ ${tarball_s3_bucket_name}
             "Sid": "s3Read",
             "Effect": "Allow",
             "Action": [
-                "s3:ListBucket",
                 "s3:GetObject"
             ],
             "Resource": [
-                "arn:aws:s3:::${tarball_s3_bucket_name}",
-                "arn:aws:s3:::${tarball_s3_bucket_name}/*",
+                "arn:aws:s3:::${tarball_s3_bucket_name}/sonar/*",
             ]
         }
 }
diff --git a/dsf_instances_permissions_samples/DsfHubInstancePermissions.txt b/dsf_instances_permissions_samples/DsfHubInstancePermissions.txt
@@ -37,12 +37,10 @@ ${tarball_s3_bucket_name}
             "Sid": "s3Read"
             "Effect": "Allow",
             "Action": [
-                "s3:GetObject",
-                "s3:ListBucket"
+                "s3:GetObject"
             ],
             "Resource": [
-                "arn:aws:s3:::${tarball_s3_bucket_name}",
-                "arn:aws:s3:::${tarball_s3_bucket_name}/*"
+                "arn:aws:s3:::${tarball_s3_bucket_name}/sonar/*"
             ]
         }
 }
diff --git a/permissions_samples/aws/DSFIntallationAccessPermissions.txt b/permissions_samples/aws/DSFIntallationAccessPermissions.txt
@@ -4,13 +4,11 @@
         {
             "Sid": "DSFInstallationAccessPermissions",
             "Action": [
-                "s3:GetObject",
-                "s3:ListBucket"
+                "s3:GetObject"
             ],
             "Effect": "Allow",
             "Resource": [
-                "arn:aws:s3:::1ef8de27-ed95-40ff-8c08-7969fc1b7901",
-                "arn:aws:s3:::1ef8de27-ed95-40ff-8c08-7969fc1b7901/*"
+                "arn:aws:s3:::1ef8de27-ed95-40ff-8c08-7969fc1b7901/sonar/*"
             ]
         }
     ]